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Abstract 

The  world  is  in  a  midst  of  an  information  technology  revolution.  The  military  force 
that  best  exploits  and  defends  information  and  information  systems  will  have  the  military 
advantage  in  the  21st  Century  battlespace.  Much  of  the  information  and  information 
systems  that  the  military  uses  resides  on  the  National  Information  Infrastructure  (Nil), 
which  itself  is  inter-connected  with  the  Global  Information  Infrastructure  (GII). 
Consequently,  vulnerabilities  and  threats  to  the  GII  and  Nil  will  impact  not  only  military 
systems  but  also  future  military  operations.  Recognizing  the  potential  of  both  the  United 
States  military  and  an  adversary  to  exploit  these  vulnerabilities,  the  Joint  Staff  and  the 
USAF  have  published  their  doctrines  on  information  operations  (10).  At  the  same  time, 
the  USAF  is  reorganizing  its  operational  structure  to  a  forward-deployed  air 
expeditionary  force.  As  a  result,  10  will  play  a  greater  role  in  enhancing  the  application 
of  aerospace  power  against  a  future  adversary.  This  research  paper  describes  the  roots  of 
information  superiority  as  envisioned  in  top-level  visionary  documents  and  the  current  10 
doctrine.  The  research  also  discusses  potential  legal  restrictions  on  10  and  identifies 
some  10  targets  and  threats.  This  paper  also  raises  several  issues  with  the  USAF  doctrine 
and  recommends  several  steps  for  executing  10  as  the  USAF  transitions  to  an 
expeditionary  force. 
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Chapter  1 


Introduction 

Information  warfare,  in  its  essence  is  about  ideas  and  epistemology — big 
words  meaning  that  information  warfare  is  about  the  way  humans  think 
and  more  importantly,  the  way  humans  make  decisions. 

— George  J.  Stein 

Cyberwar:  Security,  Strategy,  and  Conflict  in  the  Information  Age 

Background 

In  the  past  deeade,  the  United  States  and  the  rest  of  the  world  have  experieneed  an 
exponential  inerease  in  the  amount  of  information  available  as  the  world  transitions  from 
the  industrial  age  to  the  information  age/  The  United  States  is  dependent  upon 
networked  information  systems  to  conduct  essential  business  such  as  power  generation, 
financial  transactions,  international  transportation,  and  global  communication.  This 
interdependent  network  is  critical  to  U.S.  economic  competition  in  the  global 
environment,  but  also  makes  this  information  infrastructure  a  potential  center  of  gravity 
(COG).  Through  the  interconnectivity  offered  by  this  seamless  Global  Information 
Infrastructure  (GII),  U.S.  information  systems  are  vulnerable  to  attack  from  anywhere 
and  by  anyone  in  the  world. 

The  growing  awareness  of  vulnerabilities  of  the  GII  has  focused  Department  of 
Defense  (DOD)  attention  on  protecting  our  information  and  information  systems  and  at 
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the  same  time,  ereating  a  eapability  to  exploit  an  enemy’s  information  and  information 
systems.  This  ehapter  traees  the  roots  of  information  superiority  from  the  viewpoint  of 
the  National  Seeurity  Strategy  (NSS)  and  Joint  Staff  and  USAF  vision  doeuments.  This 
ehapter  also  describes  the  significance  of  information  operations  (10)  as  currently 
embodied  in  the  recent  doctrine  publications. 

National  Security  Strategy 

The  need  to  protect  and  attack  vital  information  and  information  systems  is  well 
documented  in  a  broad  array  of  strategic  guidance  documents  ranging  from  the  NSS  to 
Joint  and  Service  publications.  The  most  recent  NSS  states  that  “threats  to  the  national 
information  infrastructure,  ranging  from  cyber-crime  to  a  strategic  information  attack  on 
the  United  States  via  the  global  information  network,  present  a  dangerous  new  threat  to 
our  national  security.”  The  NSS  notes  that  “we  must  also  guard  against  threats  to  our 
other  critical  national  infrastructures — such  as  electric  power  and  transportation — which 
increasingly  could  take  the  form  of  a  cyber-attack  in  addition  to  physical  attack  or 
sabotage.”  These  threats  come  not  only  from  traditional  state  actors,  but  also  from 
transnational  actors  such  as  international  crime  organizations,  narcotics  traffickers  and 
terrorists.  The  NSS  also  highlights  foreign  intelligence  services  adoption  of  these  same 
technologies  to  access  sensitive  information  by  using  the  global  information  network  to 
penetrate  computer  networks."^ 

Joint  Vision  2010 

Just  as  information  and  information  systems  are  changing  how  the  global  community 
interacts,  they  are  also  changing  the  underlying  concepts  of  national  security  and  the  way 
we  apply  force  in  future  wars.^  Information  and  the  technology  used  to  generate. 
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transmit,  process,  store,  and  manipulate  data  may  very  well  achieve  an  offensive  or 
defensive  advantage.^  In  Joint  Vision  2010,  the  Chairman  of  the  Joint  Chiefs  of  Staff 
provides  his  vision  on  how  the  U.S.  military  forces  will  fight  in  the  future.  He  provides 
the  “conceptual  template  for  how  America’s  armed  forces  will... leverage  teehnological 
opportunities  to  aehieve  new  levels  of  effectiveness  in  joint  warfighting.”  Furthermore, 
Joint  Vision  2010  underscores  the  fact  that  “improvements  in  information  and  systems 

o 

integration  teehnologies  will  also  significantly  impact  future  operations.”  The  key  to 
achieving  “dominant  battlespaee  maneuver”  is  through  information  superiority  (i.e.  the 
ability  to  provide  continual  and  critical  information  to  friendly  forces  while  denying  the 
same  capability  to  the  enemy). ^  Joint  Vision  2010  also  recognizes  that  both  offensive  and 
defensive  information  operations  are  critical  to  information  superiority. 

Global  Engagement 

The  USAF’s  Global  Engagement:  A  Vision  for  the  2E'  Century  Air  Force, 

complements  Joint  Vision  2010  by  reeognizing  that  “Information  Operations... will  grow 

in  importance  during  the  2H*  Century.”'®  Like  Joint  Vision  2010,  Global  Engagement 

recognizes  that  while  offensive  operations  are  important  in  order  to  exploit  and  deny 

information  to  the  enemy,  it  is  equally  or  more  important  to  proteet  one’s  own 

information  systems.  Global  Engagement  states  “the  top  IW  [Information  Warfare] 

priority  is  to  defend  our  own  increasingly  information- intensive  eapabilities”"  while 

continuing  to  develop  offensive  IW  capabilities.  Global  Engagement  acknowledges  that 

information  superiority  will  continue  to  remain  one  of  the  USAF’s  core  competencies  and 

suggests  that  information  superiority  is  vital  to  the  “control  of  air  and  space  as  a  critical 
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enabler  for  the  Joint  force.” 
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The  above  three  doeuments  elearly  illustrate  the  importanee  of  information 
superiority  to  future  military  operations.  Both  the  Joint  Staff  and  the  USAF  have  taken 
the  next  step  by  incorporating  the  importance  of  information  superiority  and  10  into  their 
respective  doctrine.  Despite  its  emergence  as  a  potential  “revolution  in  military  affairs,” 
there  are  some  underlying  questions  on  whether  the  Joint  community  and  the  USAF  is 
prepared  for  full  realm  of  10. 

Definition  of  Research  Topic 

Significance  of  the  Problem 

The  world  is  in  the  midst  of  an  information  revolution.  The  advancements  in 
computing  technologies  are  changing  the  basic  power  relationships  of  nation-states, 
politically,  economically,  and  socially,  but  also  militarily.  In  addition,  the  cost  and  size 
of  computing  technology  are  becoming  cheaper  and  smaller.  As  a  result,  computers  and 
other  technology  devices  such  as  cellular  phones  and  hand-held  devices  are  now 
ubiquitous.  The  rapid  expansion  of  these  technologies  has  created  a  demand  for 
information  that  is  readily  accessible  and  available  to  anyone  at  anytime  or  anyplace. 
This  is  readily  seen  in  the  dramatic  increase  in  the  use  of  the  Internet,  the  single  entity 
that  has  made  information  flow  and  exchange  a  global  reality.  The  Internet  has  also 
expanded  into  third  world  and  potential  enemy  countries  such  as  China,  Iran,  and  North 
Korea.  Consequently,  the  information  explosion  also  provides  our  adversaries  with 
potential  10  opportunities  against  our  NIT  Our  enemies  now  have  the  ability  to  use 
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information  to  ignite  a  Tofflerian  “third  wave  war.” 
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Thesis 


In  order  to  exploit  this  new  way  of  war  and  to  eombat  the  potential  threat,  the  Joint 
Staff  and  the  USAF  have  reeently  published  their  respeetive  doetrines  on  10.  At  the 
same  time,  the  USAF  is  changing  its  war-fighting  organization  structure  to  meet  future 
contingency  needs  and  reduce  operational  tempo.  For  the  Joint  Force  Commander  (JFC) 
and  the  USAF,  the  Air  Expeditionary  Force  (AEF)  is  the  new  way  to  deploy  and  employ 
aerospace  power  in  the  future. 

However,  the  Air  Eorce  doctrinal  documents  do  not  address  an  10  strategy  either 
unilaterally  or  in  support  of  the  AEE.  At  the  direction  of  senior  leaders  at  the  CORONA 
TOP  98,  the  Air  Intelligence  Agency  (AIA)  is  establishing  10  Elights  (lOE)  at  various 
Numbered  Air  Eorces  (NAE)  as  an  initial  step  towards  meeting  the  intent  of  the  doctrine 
documents.  Given  the  lack  of  technical  tools  and  legal  restrictions  imposed  upon  the 
military,  the  question  is  whether  the  lOE  concept  is  sufficient  to  support  a  war  or  military 
operations  other  than  war  (MOOTW). 

This  research  will  review  the  lOE  concept  as  envisioned  by  AIA.  This  paper  will 
then  propose  additional  steps  that  the  Air  Eorce  must  take  in  order  to  meet  the  intent  of  its 
doctrine  and  to  be  consistent  with  the  Joint  doctrine. 


Notes 

^  Alvin  and  Heidi  Toffler,  War  and  Anti-war:  Survival  at  the  Dawn  of  the  21st 
Century,  (New  York:  Eittle,  Brown,  and  Company,  1993),  9. 

^  The  White  House,  A  National  Security  Strategy  for  a  New  Century,  October  1998, 

6. 

^  Ibid. 

^  Ibid.,  7. 

^  Douglas  H.  Dearth,  “Information  War:  Rethinking  the  Application  of  Power  in  the 
2\si  CQnixwy,"  Military  Intelligence,  January-March  1997,  11. 
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^  Major  Keith  D.  Anthony,  “Information  Warfare:  Good  News  and  Bad  News,” 
Military  Intelligence,  January-Mareh  1997,  31. 

’  Joint  Chiefs  of  Staff,  Joint  Vision  2010,  Washington,  D.C.,  1996,  1. 

^Ibid.,  13. 

Ibid.,  16. 

Department  of  the  Air  Foree,  Global  Engagement:  A  Vision  for  the  2E‘  Century 
Air  Force,  Washington,  D.C.,  1997,  14. 

“  Ibid. 

Ibid.,  10. 

Toffler  and  Toffler,  9. 
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Chapter  2 


Doctrine 

Cyberwar  is  not  merely  a  new  set  of  operational  techniques.  It  is 
emerging  as  a  new  mode  of  warfare  that  will  call  for  new  approaches  to 
plans  and  strategies,  and  new  forms  of  doctrine  and  organization. 

— John  Arquilla  and  David  Ronfeldt 
Cyberwar  is  Coming 

Military  doctrine  shapes  the  armed  forees  strategy  and  ensures  unity  of  effort 
between  the  Serviees,  Joint  Staff,  and  other  governmental  and  non-govemmental 
ageneies.  Joint  Publieation  1,  Joint  Warfare  of  the  Armed  Forces  of  the  United  States, 
states  that  “military  doetrine  presents  fundamental  prineiples  that  guide  the  employment 
of  forees.”'  Joint  Pub  1  further  underseores  the  importanee  of  doetrine  by  indieating  that 
“joint  doetrine  offers  a  eommon  perspeetive  from  which  to  plan  and  operate,  and 
fundamentally  shapes  the  way  we  think  and  train  for  war.”  From  the  military 
perspeetive,  doetrine  provides  the  framework  for  achieving  national  objeetives  through 
the  military  instrument  of  power. 

The  USAF  doetrine  eehoes  a  similar  position.  In  the  foreword  to  Air  Foree  Doetrine 
Doeument  (AFDD)  1,  Air  Force  Basic  Doctrine,  the  Chief  of  Staff  of  the  Air  Foree, 
General  Michael  E.  Ryan,  writes,  “doetrine  must  draw  together  the  lessons  of 
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history... and  our  insights  of  the  future.”  AFDD  1  further  states  that  doetrine  is  the 
“linehpin  of  sueeessful  military  operations.”"' 
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This  chapter  describes  the  origins  of  current  10  doetrine,  i.e.  command  and  control 
warfare  (C2W)  doetrine.  This  ehapter  also  introduees  the  Joint  Staff  and  USAF  doetrine 
for  10.  Both  doetrinal  publications  are  the  key  to  planning  for  and  employing  10  aeross 
the  speetrum  of  eonfliet. 

Command  and  Control  Warfare  Doctrine 

The  C2W  eoneept  originally  began  in  the  late  1970s,  when  the  DOD  published  the 
first  direetive  on  command,  control,  and  communications  countermeasures  (C3CM) 
application.  This  directive  called  for  the  “integrated  use  of  operational  security,  military 
deception,  jamming,  and  physieal  destruetion  to  attack  enemy  command,  control,  and 
communications  (C3)  systems  while  proteeting  similar  friendly  systems.”^  Until  the  start 
of  the  Persian  Gulf  War,  revisions  to  the  early  direetive  emphasized  effective  C3 
capability  while  denying  the  same  to  our  adversary.  The  revisions  also  reflected  the 
eombined  nature  of  future  wars  and  mandated  C3CM  training  at  the  joint  and 
multinational  levels. 

The  Persian  Gulf  War  refieeted  a  major  shift  in  the  applieation  of  the  early  doctrine. 
The  war  demonstrated  the  effective  use  of  the  C3CM  pillars  to  coneeal  Coalition 
movements,  deeeive  Iraqi  military,  and  destroy/jam  Iraqi  C2  systems  and 
eommunieations  nodes.  The  war  also  represented  the  first  integrated  use  of 
psychologieal  operations  (PYSOP)  with  traditional  C3CM  funetions  to  encourage  the 
Iraqi  military  to  surrender.^  The  Gulf  War’s  integrated  C2W  strategy  effectively  eut  off 
the  “eyes  and  ears”  of  the  enemy. 

The  end  of  the  Persian  Gulf  War  saw  a  need  to  document  the  lessons  learned  from 
using  C3CM  in  conjunetion  with  PYSOP.  These  lessons  of  the  war  were  initially 
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codified  in  the  Chairman  of  the  Joint  Chiefs  of  Staff  (CJCS)  Memorandum  of  Poliey 
(MOP)  30,  whieh  gave  rise  to  C2W/  In  1996,  the  Joint  Staff  published  its  doetrine 
foeusing  on  C2W  poliey,  planning,  edueation,  and  employment. 

Joint  Publieation  (JP)  3-13.1,  Joint  Doctrine  for  Command  and  Control  Warfare, 
defines  C2W  as  “the  integrated  use  of  operations  seeurity  (OPSEC),  military  deeeption, 
psyehologieal  operations  (PSYOP),  eleetronie  warfare  (EW),  and  physieal  destruetion, 
mutually  supported  by  intelligenee,  to  deny  information  to,  infiuenee,  degrade,  or  destroy 

g 

adversary  C2  eapabilities  while  proteeting  friendly  C2  eapabilities  against  sueh  aetions.” 
Eike  its  predeeessors,  C2W  has  both  offensive  and  defensive  aspeets  (i.e.  C2-Attaek  and 
C2-Proteet,  respeetively).  The  C2-Attaek  objeetive  is  separate  the  “head  from  the  body” 
by  degrading  or  destroying  the  enemy’s  C2  systems  while  the  C2-Proteet  objeetive  is  to 
overeome  the  effeets  of  the  enemy’s  C2-Attaek.^  The  C2W  doetrine  also  deseribes  a 
relationship  between  itself  and  IW.  JP  3-13.1  states  that  “eommand  and  eontrol  warfare 
is  an  applieation  of  IW  in  military  operations  and  is  a  subset  of  C2W  offers  the 

military  eommander  “lethal  and  non-lethal  means  to  aehieve  the  assigned  mission  while 
deterring  war  or  promoting  peaee.”'^  Even  early  on,  the  Joint  Staff  eonsidered  C2W  as 
an  effeetive  tool  before  the  outbreak  of  traditional  hostilities  and  onee  in  hostilities,  as  the 
taetieal  applieation  of  a  large-seale  IW. 

Joint  Information  Operations  Doctrine 

Joint  Publieation  3-13,  Joint  Doctrine  for  Information  Operations,  eaptures  the  joint 
perspeetive  on  10  and  provides  the  “overarehing  operational  guidanee  for  information 
operations.”  The  Joint  doetrine  defines  10  as  “aetions  taken  to  affeet  adversary 
information  and  information  systems,  while  defending  one’s  own  information  and 
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information  systems.”  The  doetrine  also  mandates  the  integration  of  10  with  other 
operations  (air,  land,  sea,  space,  and  special)  in  order  to  “affect  the  information-based 
process,  whether  human  or  automated.”^"^ 

The  doctrine  recognizes  that  10  is  applicable  at  the  strategic,  operational,  and  tactical 
levels  of  war  and  can  be  used  both  in  war  and  in  MOOTW.  At  the  strategic  level,  10  (as 
part  of  the  military  instrument  of  power  [lOP])  is  used  with  the  diplomatic  and  economic 
lOPs  to  affect  an  adversary’s  national  power  base  while  protecting  similar  elements 
within  the  United  States.  At  the  operational  and  tactical  level,  10  helps  to  achieve 
campaign  or  tactical  objectives  against  enemy  logistics,  intelligence,  C2,  and  other 
related  systems.  The  Joint  Staff  states  that  10  makes  a  huge  impact  by  acting  as  a 
“deterrent  in  peace  and  during  the  initial  stages  of  crisis. 

Like  joint  C2W  doctrine  ,  the  10  doctrine  is  broken  down  into  two  aspects:  offensive 
10  and  defensive  10.  Offensive  10  is  the  “integrated  use  of  assigned  and  supporting 
capabilities,  mutually  supported  by  intelligence,  to  affect  adversary  decision  makers  and 
achieve  or  promote  specific  objectives. It  integrates  OPSEC,  PSYOP,  military 
deception,  physical  attack,  and  electronic  warfare.  The  doctrine  identifies  a  new 
capability  called  special  information  operations  (SIO).  SIO  includes  computer  network 
attack  (CNA).  However,  SIO  use  requires  extensive  policy  review  and  approval  by  NCA 
or  combatant  commanders  due  to  the  potential  for  massive  destruction. 

Defensive  10  is  “the  integration  and  coordination  of  policies  and  procedures, 
operations,  personnel,  and  technology  to  protect  and  defend  information  and  information 
systems.”  Defensive  10  centers  on  four  interrelated  processes:  information 
environment  protection,  information  attack  detection,  capability  restoration,  and  attack 


10 


1 8 

response.  Together,  these  four  processes  “ensure  defense  in  depth.”  When  conducting 
defensive  10,  planners  are  required  to  integrate  offensive  10  along  with  information 
assurance,  education,  intelligence  support,  counter-deception,  counter-propaganda 
operations,  public  affairs,  command  information  programs,  and  counter-intelligence.  The 
doctrine  recognizes  the  military’s  contribution  to  information  assurance  by  investigating 
information  system  incidents  and  apprehending  criminals.'^  This  “Pandora’s  box”  gives 
the  military  a  role  in  not  only  protecting  military  information  systems,  but  also  public  and 
commercial  information  infrastructures.  The  protection  of  the  Nil  also  presents  legal 
challenges  for  military  commanders. 

From  a  planning  perspective,  offensive  and  defensive  10  are  part  of  both  deliberate 
and  crisis  action  planning.  Campaign  plans  leverage  joint.  Service,  interagency,  and 
multinational  processes  and  capabilities.  As  part  of  the  planning  process,  the  combatant 
commander  identifies  a  “release  and  execution  authority”  to  coordinate  potential  legal 
issues  regarding  10  employment.  Due  to  the  mass  effects  of  certain  10  tools,  it’s 
probable  that  the  authority  will  remain  at  the  unified  command  or  national  level. 

Air  Force  Information  Operations  Doctrine 

The  foreword  to  AFDD  2-5,  Information  Operations,  sets  the  stage  for  the  USAF 
concept  of  10: 


Information  has  long  been  an  integral  component  of  human  competition — 
those  with  a  superior  ability  to  gather,  understand,  control,  and  use 
information  has  had  a  substantial  advantage  on  the  battlefield.  History  is 
replete  with  examples  of  how  information  has  influenced  political  and 
military  struggles — from  the  earliest  battles  of  recorded  history  to  current 
operations  in  Bosnia.  The  Air  Force’s  vision... recognized  this  by 
identifying  information  superiority  as  one  of  the  six  Air  Force  core 
competencies.  The  execution  of  information  operations  in  air,  space,  and 
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increasingly,  in  “cyberspace”  constitutes  the  means  by  which  the  Air 
Force  does  its  part  to  provide  information  superiority  to  the  nation,  joint 
force  commander,  and  Service  component  and  coalition  forces. 

Like  Joint  Staff  doctrine,  USAF  doctrine  also  recognizes  that  10  is  applicable 
throughout  the  spectrum  of  military  operations.  Further,  the  doctrine  considers  10  as  a 
force  enabler  by  “supporting  commanders  in  determining  the  situation,  assessing  threats 
and  risks,  and  making  timely  and  correct  decisions.”  The  Air  Force  considers  the  end 
objective  of  10  is  “information  spectrum  occupation”  similar  to  “air  occupation”  through 
aerospace  operations. 

The  two  pillars  of  10  are  information-in-warfare  (IIW)  and  IW.  Figure  1  shows  the 
USAF’s  10  construct.  The  document  defines  IIW  as  10  conducted  to  “provide  global 
awareness  throughout  the  range  of  military  operations  based  on  its  integrated  intelligence, 
surveillance,  and  reconnaissance  assets;  its  information  collection  and  dissemination 
activities;  and  its  global  navigation  and  positioning,  weather,  and  communications 
capabilities.”^"^  IIW  is  the  traditional  intelligence  process  for  understanding  the  enemy 
and  shaping  the  battlespace.  IIW  applies  to  both  war  and  MOOTW  operations. 

IW  is  “information  operations  conducted  to  defend  the  Air  Force’s  own  information 
and  information  systems  or  conducted  to  attack  and  affect  an  adversary’s  information  and 
information  systems.”  The  attack  aspect  of  IW  is  conducted  during  a  crisis  or  conflict 
while  the  defend  aspect  is  inherent  in  the  peace-war  continuum.  AFDD  2-5  also  breaks 
down  IW  into  two  distinct  but  inter-related  components:  offensive  counter- information 
(OCI)  and  defensive  counter- information  (DCI).  Like  offensive  counter- air/ space 
operations  and  defensive  counter-air/space  operations,  OCI  and  DCI  achieve  information 
superiority  over  an  adversary. 
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INFORMATION  SUPERIORITY 


PSVOP  IMopratW  AMuraooe 

Ehtdojnic  Warfam  OPSEC 
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P^y»la^  Attack  Courrttf  PSYOP 

inforniacion  Attack  El^csronic  Procachoo 

Count«rd»c«p4ion 
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Figure  1,  USAF  Information  Operations  Construct 

OCI  is  “IW  activities  which  are  conducted  to  control  the  information  environment  by 
denying,  degrading,  disrupting,  destroying,  and  deceiving  the  adversary’s  information 
and  information  systems.”  The  traditional  C2  functions,  PSYOP,  EW,  military 
deception,  and  physical  attack  fall  under  the  OCI  umbrella.  Like  the  Joint  C2W  doctrine, 
the  USAF  doctrine  reflects  the  lessons  learned  from  the  Persian  Gulf  War.  One  new 
function  under  OCI  is  a  new  capability  called  information  attack  (lA).  lA  is  “activities 
taken  to  manipulate  or  destroy  an  adversary’s  information  and  information  systems 
without  necessarily  changing  visibly  the  physical  entity  within  which  it  resides.”  lA  is 
similar  to  the  Joint  doctrine’s  SIO,  specifically  CNA. 

DCI  is  “information  operations  conducted  to  protect  and  defend  friendly  information 
and  information  systems  from  the  adversary.”  The  doctrine  publication  places 
information  assurance,  OPSEC,  counter-deception,  counter-intelligence,  counter-PS YOP, 
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and  electronic  protection  under  the  DCI  fold.  The  Joint  doctrine  recognizes  the  need  to 
equally  integrate  offensive  and  defensive  10  actions.  Similarly,  the  USAF  doctrine  also 
stresses  the  need  to  coordinate  OCI  elements  with  DCI  techniques.  Unlike  the  Joint 
doctrine,  the  USAF  places  a  greater  emphasis  on  DCI  by  stating  that  “DCI  is  the  Air 
Force’s  overall  top  priority  within  the  information  warfare  area.”  Military  commanders 
are  responsible  for  developing  an  effective  DCI  program,  both  in  terms  of  posture  and 
execution,  within  their  commands.  Further,  the  USAF  doctrine  is  primarily  focused  on 
the  military  aspects  of  10  and  does  not  address  coordination  with  other  government  or 
non-governmental  agencies  including  industry. 

Air  Expeditionary  Force  Concept 

In  1998,  the  USAF  devised  a  strategy  to  change  its  operational  structure  in  order  to 
reduce  the  operations  tempo  while  continuing  to  meet  contingency  requirements.  This 
new  strategy  calls  for  the  establishment  of  10  standing  AEFs.  Each  AEE  is  a  “force 
package”  with  elements  of  fighter,  bomber,  airlift,  support  personnel,  aircraft,  and 
equipment.  The  goal  is  to  respond  rapidly  and  effectively  to  any  crisis  or  contingency 

3 1 

situation  in  the  world. 

Of  the  10  AEEs,  two  are  always  ready  to  deploy  for  a  90-day  period  as  a  crisis 
response  team.  The  other  eight  AEEs  remain  in  their  normal  cycle  of  training  or 
readiness  inspection,  but  can  deploy  under  normal  war  plans  tasking.  The  end  objective 

32 

is  for  each  AEE  to  deploy  approximately  every  15  months  on  a  set  schedule. 

While  the  expeditionary  air  force  concept  is  not  new,  the  AEE  provides  the  JEC  with 
a  lethal  mix  of  people  and  firepower.  Since  a  “generic”  AEE  mix  has  both  operations  and 
support  personnel  within  the  air  operations  center  (AOC),  10  is  critical  to  AEE 
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employment.  AFDD  2,  Organization  and  Employment  of  Aerospace  Power,  tasks  the 
Direetor  of  Operations  and  Plans  within  the  AEF  to  “develop  and  eoordinate  a  plan  that 

33 

integrates  information  operations  to  accomplish  the  joint  force  commander  objectives.” 

Summary 

The  Joint  Staff  and  the  Air  Force  have  achieved  a  significant  milestone  in 
documenting  how  the  combatant  commander  and  the  supporting  commands  will  plan  and 
organize  for  10.  The  next  step  in  the  cycle  is  to  establish  a  strategy  for  10  in  support  of 
strategic  and  operational  objectives.  While  many  of  the  10  functions  are  not  new,  CNA 
and/or  lA  present  challenges  to  the  military  commanders.  Both  have  the  potential  to 
create  havoc  and  devastate  an  adversary  beyond  compare.  The  next  chapter  discusses  the 
impact  of  the  traditional  law  of  armed  conflict  on  this  new  capability. 
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Chapter  3 


Information  Operations  and  the  Law 


The  worldwide  information  explosion  provides  new  meaning  to  the 
expression  “target-rich  environment.  ”  The  term  does  not  do  justice  in 
today’s  information  infrastructures  and  their  value  as  targets.  The 
challenge  can  be  met  by  analyzing  the  adversary ’s  processes  and 
capabilities,  including  their  technical  characteristics  and  developing 
information  weapons  to  attack  at  the  optimum  time. 

— Brigadier  General  Grover  Jackson,  USAF,  Retired 
Air  Intelligence  Agency  Spokesman  Magazine 

The  rapid  explosion  in  information  technology  poses  new  challenges  for 
international  law,  and  specifically  for  international  law  addressing  armed  conflict. 
Satellites,  cellular  systems,  computing  technologies,  and  the  Internet  have  not  only  linked 
the  world  into  a  seamless  international  network,  but  have  done  so  at  a  pace  that  exceeds 
governmental  regulation  or  international  law  and  agreements.  These  new  technologies 
have  also  allowed  the  military  to  create  and  deploy  new  armaments  with  unprecedented 
range,  speed,  and  lethality.^  Since  information  technologies  can  be  used  by  the  military 
to  target  an  enemy’s  social  and  economic  infrastructures,  the  law  of  armed  conflict 
(LOAC)  may  apply  to  future  military  operations  in  the  information  realm.  This  chapter 
discusses  the  principles  of  LOAC,  and  how  the  legal  and  regulatory  restrictions  may 
impact  10. 
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Information  as  a  Weapon 


Joint  Publication  3-13  defines  information  as  “faets,  data,  or  instruetions  in  any 
form”  or  “the  meaning  that  a  human  assigns  to  data.”  But  the  question  is  whether 
information  is  a  weapon  itself  There  are  numerous  historieal  examples  of  how  the 
knowledge  and  understanding  of  information  ehanged  the  eourse  of  a  war.  For  example, 
in  the  Persian  Gulf  War,  the  Coalition  used  information  to  deeeive  and  eonfuse  the  Iraqi’s 
understanding  of  the  battlefield.  During  the  war,  information  shaped  the  battlefield  by 
externally  affeeting  the  Iraqi’s  information  proeessing  systems.  The  advanees  in 
eomputing  technologies  now  make  it  possible  to  directly  attack  an  enemy’s  internal 
information-based  proeessing  systems  using  lA  tools.  For  the  first  time,  information  ean 
be  direetly  eonsidered  to  be  a  weapon  to  aehieve  national  seeurity  objectives. 
International  law  on  how  a  nation  ean  use  or  deny  information  in  armed  eonfiiet  is  searee. 
For  now,  LOAC  as  it  applies  to  10  (in  reality,  CNA  or  lA)  has  to  be  extrapolated  from 
other  sourees. 


Law  of  Armed  Conflict 

International  law  is  "the  standard  of  conduet,  at  a  given  time,  for  states  and  other 
entities  subjeet  thereto.  It  eomprises  the  rights,  privileges,  powers,  and  immunities  of 
states  and  entities  invoking  its  provisions,  as  well  as  the  correlative  fundamental  duties, 
absenee  of  rights,  liabilities  and  disabilities.”  ^  The  LOAC  is  the  part  of  international  law 
that  regulates  the  eonduct  of  armed  hostilities  by  nations  and  primarily  exists  to  reduee 
the  effeets  of  eonfiiet  and  prevent  unneeessary  suffering  by  savagery  or  brutality.^  It 
arose  from  a  desire  to  lessen  the  effeets  of  armed  conflict.^ 
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The  LOAC  is  derived  from  several  international  treaties  sueh  as  The  Hague  and 
Geneva  Conventions  as  well  as  customary  international  law/  It  applies  regardless  of 
whether  or  not  a  nation  is  formally  at  war  with  another  state.  Further,  the  LOAC  applies 
to  all  armed  conflicts  between  nation-states,  but  excludes  civil  wars  or  battles  with 

g 

transnational  groups  such  as  terrorists.  The  USAF  echoes  a  similar  position  by  stating 
that  its  personnel  will  comply  with  LOAC  during  military  operations  and  other  armed 
conflicts,  “regardless  of  how  such  conflicts  are  characterized.”^ 

As  mentioned  above,  the  Hague  Convention  of  1907  addresses  the  use  of  armed 
force.  The  Convention  divides  the  application  of  force  into  four  basic  principles:  military 
necessity,  proportionality,  humanity  and  chivalry. 

Military  Necessity 

The  principle  of  military  necessity  “permits  the  use  of  regulated  force  that  is  not 
forbidden  by  international  law  and  which  is  indispensable  for  securing  the  prompt 
submission  of  the  enemy,  with  the  least  possible  expenditures  of  life,  time,  and  physical 
resources. The  principle  requires  that  the  user  regulate  the  application  of  force. 
Military  necessity  also  requires  a  military  commander  to  estimate  the  amount  of  force 
required  to  capture  or  kill  a  combatant,  while  at  the  same  time,  ensuring  that  more  force 
than  necessary  is  not  added.  It  also  forces  the  commander  to  discriminate  between 
legitimate  military  objectives  and  civilian  objects.*^ 

Humanity 

The  principle  of  humanity  forbids  military  commanders  to  cause  unnecessary 
suffering,  injury  or  destruction  that  is  not  actually  necessary  for  achieving  legitimate 
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military  purposes.  It  also  outlaws  the  use  of  specific  weapons  that  have  been  outlawed 

1 3 

by  international  treaties  such  as  certain  chemical  or  biological  weapons. 

Chivalry 

The  principle  of  chivalry  compels  a  nation  to  wage  war  in  accordance  with  well- 
recognized  formalities  and  courtesies.  It  exists  primarily  to  make  armed  conflict  less 
savage  and  more  civilized  for  the  individual  combatant.  It  also  attempts  to  outlaw 
treachery  through  illegal  ruses  such  as  faking  a  surrender  or  other  acts  of  perfidy. 

Proportionality 

The  principle  of  proportionality  acknowledges  that  the  “application  of  armed  force 
may  result  in  physical  destruction  and  personal  injury/death  to  non-combatants  or  other 
non-military  targets.  It  requires  that  the  damage  or  death  be  limited  to  the  extent 
consistent  with  the  military  necessity  of  the  attack.”'^  As  such,  military  commanders  are 
required  to  assess  the  potential  for  civilian  destruction  or  death  through  an  armed  attack 
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and  the  military  necessity  of  the  target  before  applying  such  force. 

Application  of  LOAC  to  Information  Operations 

If  information  is  a  weapon,  similar  to  precision  guided  munitions  or  nuclear 
weapons,  then  LOAC  applies  across  the  board.  Although  it  predates  the  development  of 
10  techniques  (specifically,  lA  or  CNA),  military  commanders  must  consider  LOAC  in 
any  potential  conflict  due  to  the  ability  to  cause  catastrophic  damage  through  lA.  Many 
questions  on  the  proper  application  (both  in  terms  of  time  and  amount)  of  lA  remain.  For 
example,  how  can  we  ensure  that  information  attacks  are  proportional  when  military  and 
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civilian  power  systems,  finaneial  networks,  and  eommunieations  systems  are  intertwined 
in  a  seamless  network?  Fundamentally,  when  is  an  lA  eonsidered  to  be  the  use  of 
armed  foree?  This  question  requires  the  DOD  to  establish  eriteria  for  deteeting  and 
assessing  an  lA. 

It’s  probably  too  early  to  determine  the  endless  possibilities  that  may  or  may 
eonstitute  an  information  attack.  Clearly,  the  use  of  information  weapons  to  produce 
results  similar  to  a  “hard  kill”  is  equivalent  to  armed  aggression.  On  the  other  hand,  the 
use  of  10  teehniques  to  eommit  eomputer  erimes,  even  from  outside  of  a  nation’s 
territory,  is  not  as  an  lA  requiring  a  response  in  kind.  Consequently,  before  an  lA  is 
eonsidered  as  “aggression  by  a  foreign  force,”  military  commanders  must  aseertain  the 
seale  and  nature  of  the  attaek  along  with  the  aetors  eondueting  the  attaek  before 
responding  militarily.  The  ehallenge  lies  in  determining  the  precise  nature  of  the  attaek 
and  establishing  where  in  the  eyberspaee  the  attaek  oeeurred  before  resorting  to  the 
LOAC. 


Summary 

The  use  of  IW  by  a  state  or  by  transnational  aetors  sueh  as  terrorists  may  require  a 
military  response  by  the  United  States.  While  the  eriteria  that  may  elieit  a  response  by 
the  military  are  unelear,  any  use  of  10  teehniques  to  attain  politieal  or  military  objeetives 
should  eonform  to  international  law.  This  is  espeeially  important  sinee  eomputing 
technologies  makes  lA  a  potent  teehnique  to  alter  an  adversary’s  power  base  or  eause 
effects  similar  to  weapons  of  mass  destruetion.  Before  any  lA  (either  defensive  or 
offensive)  ean  take  plaee,  the  military  has  to  identify  and  eharaeterize  the  nature  of  the 
attack  before  responding  in  kind.  In  order  to  utilize  10  aeross  the  full  speetrum  of  the 
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conflict,  it  is  necessary  to  understand  the  IW  threats  that  may  impact  national  and 
military  infrastructures.  The  next  chapter  discusses  the  IW  threats  and  the  vulnerability 
of  the  United  States  to  such  threats. 
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Chapter  4 


The  Information  Operations  Threat 


The  electron  is  the  ultimate  precision  guided  weapon. 

— John  M.  Deutch 
Former  Director,  Central  Intelligence  Agency 

As  stated  earlier,  the  United  States  is  heavily  dependent  on  global,  networked 
systems  for  commerce,  government,  transportation,  and  financial  transactions.  More 
importantly,  the  U.S.  military  uses  these  same  inter-connected,  commercial  systems  to 
transmit  financial  information  and  personnel  records  data  and  to  communicate  basic 
orders  between  higher  and  lower  echelons.  Military  commanders  now  receive 
information  at  an  unprecedented  speed  and  quantity  due  to  advances  in  computer  network 
systems  and  technologies.  This  dependence  on  national  information-based  systems  raises 
potential  vulnerabilities,  which  can  be  exploited  by  an  adversary  wishing  to  counter  U.S. 
military  objectives.  According  to  Martin  Libicki  of  the  National  Defense  University 
(NDU),  the  United  States  is  vulnerable  to  attack  on  its  national  information  structure,  and 
opines,  “It  must  be  assumed  that  any  nation  at  war  with  the  United  States  will  attack 
military  systems  (especially  logistics  and  mobilization  systems)  anyway  it  can.”^ 

This  chapter  discusses  the  potential  threats  to  information-based  systems  and 
whether  the  United  States  is  vulnerable  to  the  newest  form  of  10  (i.e.  the  Air  Force’s  lA 
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or  Joint  Staffs  CNA).  The  United  States  is  an  “information  dominant  soeiety”  and  as 
sueh,  any  future  adversary  will  probably  probe  for  vulnerabilities  to  our  COGs  and 

implement  offensive  10  measures  in  order  to  “eripple  the  our  information  based  soeiety 

2 

from  carrying  out  its  information-dependent  enterprises.” 

What  is  the  threat? 

Joint  Vision  2010  states  that,  “The  U.S.  must  prepare  to  face  a  wider  range  of  threats, 
emerging  unpredictably,  employing  varying  combinations  of  technology,  and  challenging 
us  at  varying  levels  of  intensity.”  The  exponential  growth  and  reliance  on  information 
and  information-based  systems  makes  IW  a  potential  threat  in  the  next  century. 
Information  attacks  using  computer-based  systems  is  relatively  inexpensive  and  offers  a 
practical  alternative  to  conventional  attack  by  state  and  non-state  actors.  Consequently, 
radical  groups  and  non-state  terrorists  can  potentially  cripple  the  United  States. 
According  to  the  CIA  Director,  George  J.  Tenet,  “an  adversary  capable  of  implanting  the 
right  virus  or  accessing  the  right  terminal  can  cause  massive  damage.”"^ 

Another  aspect  of  IW  is  its  anonymity.  Computer  network  attacks  (like  a  hacker 
invading  a  network  for  fun  or  with  deadlier  implications)  can  be  waged  from  literally 
anywhere  in  the  world.  Once  launched,  lA  or  CNA  is  relatively  difficult  to  detect.  If 
detected,  then  it’s  even  more  difficult  to  assess  the  nature  of  the  attack.  If  not  assessed 
properly,  the  situation  presents  political  and  legal  dilemmas  for  the  DOD  and  national 
security  decision-makers.  Our  adversaries  may  see  any  reluctance  to  act  as  a  sanctuary 
from  which  to  operate  with  impunity.^  The  Joint  Staff  underscores  this  dilemma  and 
states  that,  “To  get  to  the  essence  of  the  IW  threat  requires  an  understanding  of  three 
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elements:  identities  and  intentions  of  possible  attaekers;  possible  attaek  teehniques  and 


methods;  and  finally  potential  targets,  extending  from  the  strategie  to  the  taetieal  levels.”^ 
The  Joint  Staff  publieation,  Information  Warfare:  A  Strategy  for  Peace. ..The 
Decisive  Edge  in  War,  identifies  several  potential  IW  targets  as  shown  in  Figure  2.  These 
types  of  targets  are  similar  to  Colonel  John  Warden’s  targets  in  his  Five  Rings  model  and 
are  potentially  the  Unites  States’  COG  for  an  enemy  attaek. 
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Figure  2.  Examples  of  I W  Targets’ 


Riehard  Power,  a  noted  eomputer  seeurity  expert,  identifies  ten  infrastrueture  targets 
that  may  be  attaeked  by  IW  means.  Some  potential  U.S.  targets  are:  (1)  Culpepper 
Switeh  in  Virginia  whieh  is  responsible  for  all  federal  monetary  transaetions;  (2)  Alaska 
pipeline  whieh  handles  10  pereent  of  the  U.S.  oil  requirements;  (3)  Internet;  (4)  Time 
Distribution  System;  (5)  Worldwide  Military  Command  and  Control  System;  (6) 
Eleetronie  Switehing  System;  (7)  Air  Foree  Satellite  Control  System;  and  (8)  the  National 

g 

Photographie  Interpretation  System  in  Washington,  D.C. 

AFDD  2-5  also  presents  examples  of  IW  threats  (and  the  weapons)  whieh  present  a 
risk  to  information-based  weapons  and  support  systems.  Figure  3  shows  the  various  IW 
threats  (i.e.  weapons)  that  fall  under  four  broad  eategories:  eompromise, 
deeeption/eorruption,  denial/loss,  and  destruetion. 
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Figure  3,  Information  Warfare  Threats  and  Weapons^ 


From  the  Air  Force  perspective,  these  IW  weapons  present  a  significant  threat  to 
weapons  platforms  such  as  the  upcoming  F-22  fighter,  C4ISR  systems,  and  to  precision 
guided  munitions.  The  area  of  most  concern  is  with  lA  or  CNA.  It  is  rather  easy  for 
individuals  to  insert  a  computer  virus  or  logic  bomb  to  delay,  degrade,  or  ideally  destroy 
a  weapon  system.  An  adversary  can  use  “insiders”  or  bribe  individuals  to  insert  an  IW 
weapon  during  production  and  set  the  activation  date  to  occur  well  into  the  future  or  after 
a  specific  act.  The  USAF  considers  these  “internal  threats”  as  the  highest  risk.^° 

Vulnerabilities  of  U.S.  Information  Systems 

Despite  disagreements  on  the  nature  of  an  lA  or  on  the  10  threat,  there  are  numerous 
examples  of  attacks  on  DOD  and  national  infrastructure  systems.  Computer  hackers  are 
invading  computer  systems  daily.  The  Defense  Information  Systems  Agency  (DISA) 
estimates  that  in  1995  alone,  up  to  200,000  attacks  occurred  against  defense-related 
systems. In  a  DISA  exercise,  DISA  personnel  used  computer  hacking  tools  to  attack 
about  25,000  DOD  systems.  The  tools  used  to  conduct  the  intrusions  are  readily 
available  on  the  public  market.  They  found  that  98  percent  of  the  system  attacks  were 
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1 2 

undetected.  Pentagon  experts  believe  that  outsiders  probe  military  computers  about  500 

1 3 

times  a  day  with  less  than  five  percent  being  detected. 

How  vulnerable  is  the  U.S  to  this  threat?  According  to  the  Defense  Science  Board 
Task  Force  on  Information  Warfare  (Defense),  a  large  measure  of  this  is  self-inflicted,  in 
that,  we  have  created  our  own  vulnerabilities  by  placing  critical  capabilities  on 
inadequately  protected  information  systems.  The  study  further  notes  that,  “we  have 
created  a  target-rich  environment  and  the  U.S.  industry  has  sold  globally  much  of  the 
generic  technology  that  can  be  used  to  strike  these  targets.”*"^  According  to  Clarence  A. 
Robinson,  editor  of  SIGNAL  magazine,  at  least  122  nations  have  computer  espionage 
programs,  and  the  computer  underground  considers  the  DOD  to  be  “easy  pickings.”’^ 

As  with  DOD  systems,  there  are  similar  concerns  on  the  Nil’s  vulnerability  to  an  lA 
or  CNA.  The  authors  of  Critical  Foundations:  Protecting  America ’s  Infrastructures, 
note  potential  vulnerabilities  in  five  areas:  information  and  communications,  energy, 
banking  and  finance,  physical  distribution,  and  vital  human  services.  The  Chairman  of 
the  President’s  Commission  on  Critical  Infrastructure  Protection,  Robert  T.  Marsh,  writes 
that  while  the  Commission  did  not  foresee  electronic  disaster  in  the  near  future,  it  did  find 
“widespread  capability  to  exploit  infrastructure  vulnerabilities.  The  capability  to  do 
harm — particularly  through  information  networks — is  real;  it  is  growing  at  an  alarming 
rate;  and  we  have  little  defense  against  it.”^^ 

Summary 

From  the  information  presented  in  this  chapter,  it  is  clear  that  there  is  an  lA  threat  to 
not  only  military  systems  but  also  to  the  NIL  The  growing  dependency  on  information 
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and  information-based  technologies  gives  our  adversaries  several  potential  COGs  for 
strategic  attacks  in  any  future  conflicts.  The  military  must  consider  the  threat  to 
information-based  systems  during  10  planning  and  execution.  If  the  military  is  to  control 
the  “information  realm,”  the  Joint  Staff  and  the  Services  need  to  take  the  next  step  in 
combating  the  lA  threat.  The  next  chapter  will  examine  the  steps  that  the  USAF  must 
take  to  ensure  that  it  is  prepared  to  employ  its  own  doctrine  as  it  moves  towards  the 
expeditionary  air  force. 
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Chapter  5 


Strategy  to  Execution 


All  that  the  AEF  commanders  need  is  the  right  information,  at  the  right 
time,  to  help  attack  the  right  targets,  in  the  right  way. 

— Robert  Wall 
Air  Force  Magazine 

The  previous  chapters  have  noted  the  United  States  growing  dependency  on  the  GII 
in  order  to  compete  in  the  global  world.  Any  vulnerability  inherent  in  the  GII  also 
impacts  the  Nil  and  its  DOD  equivalent,  the  Defense  Information  Infrastructure  (DII). 
The  reliance  on  the  GII  makes  lA  or  CNA  a  probable  weapon  of  choice  by  our  adversary. 
Our  adversaries  now  have  the  technical  ability  to  probe  U.S. -based  information  systems 
and  to  launch  an  “information  weapon”  against  these  same  systems  from  anywhere  in  the 
world,  while  remaining  anonymous  throughout  the  whole  process.  Consequently,  the 
Joint  Staff  and  the  USAF  must  prepare  to  detect,  assess,  defend,  and  respond  in  kind  to 
information  attacks.  This  chapter  discusses  how  the  USAF  should  prepare  for  future 
battle  in  the  information  domain  (i.e.  the  lA  aspect  of  the  10  doctrine).  The  first  step  is  to 
develop  a  strategy  for  10.  Once  the  strategy  is  defined,  the  USAF  should  realign  its  10 
doctrine  so  it  is  consistent  with  Joint  doctrine.  This  chapter  also  presents  several 
recommendations  for  organizing,  training  and  equipping  for  10. 
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Information  Operations  Strategy 


Forward-deployed  expeditionary  air  forees  must  operate  effectively  in  any 
environment  and  against  a  wide  range  of  potential  adversaries.  A  strategy  for  10  is  the 
first  step  by  which  the  USAF  can  address  how  10  will  enhance  the  myriad  of  aerospace 
functions.  The  end  objective  of  the  USAF’s  10  strategy  is  to  achieve  aerospace 
superiority  through  actions  to  deny,  degrade,  disrupt,  or  destroy  the  enemy’s  ability  to 
command  and  control  his  forces.  As  future  crises  occur,  national  and  theater-level 
decision-makers  will  probably  seek  an  10  response  or  solution  before  resorting  to  purely 
armed  actions.  At  the  strategic  level,  the  NCA  may  use  10  along  with  other  means  to 
achieve  national  objectives  by  infiuencing  or  affecting  an  adversary’s  power  structure. 
At  the  operational  and  tactical  level,  the  AEF  may  conduct  10  to  achieve  or  support 
strategic  objectives.  All  of  these  activities  will  require  extensive  coordination  between 
the  USAF  and  other  government  and  non-govemmental  agencies  in  order  to  shape  the 
strategic  environment,  respond  to  crises,  and  prepare  for  future  conflicts. 

The  AEF  can  influence  an  adversary  by  shaping  the  political  and  economic 
environment  through  peacetime  10  (e.g.  PYSOP).  The  AEF  can  use  public  informational 
systems  (i.e.  media)  to  clearly  articulate  its  mission  and  intent.  If  peacetime  10  fails,  the 
AEF  can  conduct  pre-emptive  10  (either  IIW  or  IW)  to  deter  adversaries  from  initiating 
hostile  actions  against  the  United  States  or  its  allies.  In  the  pre-crisis  stage,  careful  10 
planning  and  execution  may  defuse  a  crisis  and  enhance  the  diplomatic  and  economic 
lOP.  If  deterrence  fails,  the  AEF  can  conduct  both  OCI  and  DCI  to  shape  the  battlespace 
and  prepare  the  way  for  armed  action  in  order  to  achieve  the  JFC  objectives.  Once  the 
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crisis  is  resolved,  selective  10  elements  will  enhanee  negotiations  and  peaee  settlements 
favorable  to  the  United  States. 

As  described  earlier,  the  information  revolution  presents  both  opportunities  and 
vulnerabilities  for  the  USAF  and  its  new  foree  paekage,  the  AEF.  The  AEF  may  operate 
in  austere  environments  with  limited  host  nation  support  and  at  the  end  of  a  tether 
originating  from  the  United  States.  Its  presence  at  and  access  to  potential  crisis  areas 
may  make  it  an  operational  and  informational  foundation  for  follow-on  forces  as  part  of 
the  national  or  theater-level  erisis  response  team.  Consequently,  the  AEE’s  personnel, 
weapon  systems,  intelligence  assets,  and  logistics  infrastructure  will  require  protection 
against  potential  10  threats. 

In  order  to  implement  its  IIW  and  IW  strategy,  the  USAE  must  undertake  several  risk 
management  actions.  Eirst,  the  USAE  must  develop  10  databases  on  both  friendly  and 
enemy  essential  networks  and  systems  to  include  the  vulnerability  of  these  systems  to  10. 
By  understanding  the  10  vulnerabilities  and  opportunities  to  both  enemy  and  friendly 
systems,  the  AEE  can  influence  the  10  eampaign  planning  and  exeeution  process  in  order 
to  achieve  national  and  theater  objeetives.  Seeond,  the  USAE  must  strengthen  its  10 
doctrine  and  ensure  that  appropriate  lO-trained  personnel,  proeesses,  and  systems  are 
deployed  for  10  prosecution  from  peace  to  war. 

Refine  the  Air  Force  Doctrine 

The  USAE  has  taken  the  first  step  towards  10  by  publishing  its  doetrine.  However, 
there  are  some  potential  issues  that  the  USAE  should  to  resolve  in  order  to  achieve  unity 
of  effort  in  10.  Eirst  and  foremost  are  the  terminology  differences  between  the  USAE 
doetrine  and  the  Joint  doetrine.  The  Joint  doetrine  delineates  10  into  two  broad 
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categories:  offensive  10  and  defensive  10.  The  USAF  equates  these  eategories  as  OCI 
and  DCI  under  an  overarching  umbrella  called  IW.  While  its  understandable  for  the  Air 
Foree  to  equate  OCI  and  DCI  to  its  familiar  role  of  OCA  and  DCA,  the  differenees 
produee  eonfusion  and  complexity  in  a  joint  operations  environment.  The  USAF  should 
refine  its  terms  for  the  offensive  and  defensive  applieations  of  10. 

Seeond,  the  Air  Foree  must  identify  organizational  roles  and  responsibilities  for  10  at 
the  major  command  or  numbered  air  foree  (NAF)  level.  The  doetrine  mentions  that  an 
organie  “IW  Organization  (IWO)  will  perform  the  duties  and  responsibilities  of  eore  and 
resident  IW  team  members”  as  part  of  the  Commander  Air  Forees  (COMAFFOR)  staff.  ^ 
However  the  doetrine  should  elearly  define  these  duties  and  responsibilities.  Mueh  of  the 
thrust  on  IWO  seems  to  be  on  the  “defend”  and  not  on  “attack.”  AFDD  2-5  emphasizes 
this  point  by  stating  that  “an  IWO  provides  the  COMAFFOR  with  real-time  operational 
network  intrusion  deteetion  and  perimeter  defense.”  The  doetrine  also  states  that  IWO 
teams  ean  eounterattaek  using  physieal  or  teehnieal  means,  but  again  this  is  a  defensive 
response  rather  than  an  offensive  attaek.  The  doetrine  also  does  not  address  proeedures 
or  responsibilities  for  teehnieal  eounterattaek.  Teehnieal  means  of  counterattaeking  (i.e. 
lA)  presents  legal  and  moral  ehallenges  for  the  COMAFFOR.  The  doetrine  should 
deseribe  potential  rules  of  engagement  (ROE)  during  10  planning  and  execution. 

Third,  the  doetrine  does  not  identify  a  single  exeeutive  agent  for  10.  The  doetrine 
acknowledges  that  the  Air  Foree  Computer  Emergeney  Response  Team  (AECERT)  is  the 
“single  point  of  oontaot...for  eomputer  seeurity  ineidents  and  vulnerabilities.”"^  While 
this  enhanees  the  defensive  aspeet  of  IW,  there  is  not  a  corresponding  lead  organization 
for  offensive  10.  The  relationship  deseribed  in  the  doetrine  between  AECERT  and  the 
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major  commands  is  exclusively  on  eomputer  seeurity  (COMPUSEC),  and  10  is  rnueh 
more  than  just  COMPUSEC.  A  logieal  ehoice  is  for  the  Air  Eorce  to  identify  AIA  and 
specifically  the  Air  Eoree  Information  Warfare  Center  as  the  lead  agency  for  10  in  the 
Air  Eorce  with  the  mission  to  coordinate  IIW  and  IW  taeties  and  proeedures  with  the 
major  commands.  A  single  executive  agent  will  also  facilitate  the  legal  and  ROE 
considerations. 

Einally,  the  doetrine  needs  to  expand  upon  the  current  information  environment  and 
address  the  Serviee  role  in  proteeting  the  Nil  and  the  DIE  Joint  Pub  3-13  states  that 
“Open  and  interconnected  systems  are  coalescing  into  a  rapidly  expanding  GII  that 
includes  the  Nil  and  DII.”^  Over  90  percent  of  defense  eommunieations  and  database 
applications  take  place  on  the  NII.^  While  the  DOD  is  not  responsible  for  Nil  protection, 
the  USAE  ean  support  national  efforts  by  leveraging  teehnology,  proeedures,  and 
resources  with  industry  partners  and  law  enforeement  officers. 

Information  Warriors 

Martin  Eibieki  and  CDR  James  Hazlett  of  the  NDU  call  for  the  DOD  to  ereate  a 
separate  and  distinet  Information  Corps.’  Eibieki  and  Hazlett  write  that  a  separate  corps 
with  its  own  command  structure  will: 

...faeilitate  effeetive  joint  operations,  promote  the  information  revolution 
in  warfare,  unify  the  disparate  information  elements  and  give  them  an 
identity,  create  a  common  ethos  for  information  warriors,  and  provide  a 

o 

unified  interfaee  with  civilian  information  infrastructures. 

The  Air  Eoree  has  begun  to  establish  10  Elights  (lOE)  in  order  to  unify  disparate  10 
elements  and  enhanee  unity  of  effort  in  10  planning. 
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Information  Operations  Flight 

During  CORONA  TOP  98,  several  options  were  discussed  for  implementing  10  at 
the  NAFs.  The  outcome  of  CORONA  98  was  to  embed  lO-trained  personnel  within 
various  NAF  directorates  (A2,  A3,  and  A6).^  Further,  the  Air  Force’s  only  information 
warfare  squadron  (IWS),  the  609*  IWS,  was  stood  down. 

Currently,  AIA  is  planning  to  establish  an  lOF  at  the  5th,  7th,  8th,  9th,  1 1th,  and  13th 
NAF  headquarters.  Each  lOF  is  headed  by  a  field  grade  officer  and  is  comprised  of 
personnel  from  the  intelligence,  computer-communications,  law  enforcement,  and  public 
affairs  career  fields.  Each  flight  will  have  approximately  30-40  airmen  with  the  bulk 
coming  from  AIA. 

The  lOE  CONOP  is  still  under  construction  by  AIA.  However,  each  lOE  will 
“reach-back”  to  AIA  headquarters  for  products  and  services.  The  lOE  responsibilities 
include  10  database  maintenance,  enemy  capability  analysis,  C2W  target  nominations, 
and  C4ISR  asset  utilization  in  support  of  the  NAP  fighter  wings.  Consequently,  the 
lOP  is  responsible  for  both  IIW  (gain  and  exploit)  and  IW  (attack  and  defend) 
functions. 

The  Next  Steps 

The  lOP  is  a  first  step  in  implementing  the  USAP  doctrine.  However,  the  initial 
CONOP  raises  potential  issues  during  actual  implementation.  Pirst,  lOP  personnel  are 
distributed  throughout  various  NAP  headquarters  directorates.  Elements  of  the  lOP  will 
work  on  the  NAP/A2,  A3,  and  A6  staffs.  This  diversity  of  effort,  which  makes  all  three 
staffs  responsible  for  10,  defeats  unity  of  effort  and  cohesion.  Each  NAP  directorate  has 
competing  requirements  that  may  impact  fusion  of  10  planning  and  execution  within  the 
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Air  Tasking  Order  process.  By  organizing  the  lOF  under  a  single  directorate  with 
responsibility  for  coordination  between  the  NAF  staffs  and  Joint  and  DOD-level 
agencies,  the  USAF  can  achieve  economies  of  scale  and  focused  10  planning  and 
execution  during  the  spectrum  of  conflict.  It’s  also  interesting  to  note  that  while  AFDD 
2-5  indicates  that  either  the  IWO  or  an  IW  team  on  the  COMAFFOR  staff  will  handle  IW 
duties  with  intelligence  support,  AFDD  2  does  not  assign  the  A-2  any  responsibility  for 
either  IW  or  IIW.^"^  The  USAF  needs  to  correct  this  discrepancy. 

The  USAF  also  needs  to  accelerate  the  development  of  10  modeling  and  simulation 
tools,  especially  on  lA.  10  tools  provide  the  combatant  commander  with  a  range  of  non- 
lethal  and  lethal  options  to  achieve  the  strategic  objectives.  AIA  is  currently  developing 
the  Information  Operations  Planning  Tool  (lOPT),  an  advanced  technology 
demonstration  tool.  The  focus  of  lOPT  is  on  attacking  an  adversary’s  Integrated  Air 
Defense  System.'^  AIA  should  expand  lOPT  to  include  an  adversary’s  NIT  The  tools 
should  also  model  the  effects  of  an  lA  or  CNA  against  the  United  States’  Nil  and  DII. 
AIA  must  also  accelerate  the  development  of  modeling  and  simulation  tools  for  training 
10  warriors  and  to  exercise  10  capabilities.  AIA  has  taken  initials  steps  to  train  and 
certify  personnel  for  duty  with  the  lOF  by  establishing  an  10  school  at  Hurlburt  Field, 
Florida. 

Finally,  the  USAF  must  leverage  advances  in  technology  with  industry  partners.  As 
computing  hardware  and  software  memory  double  every  18  months,  the  USAF  must  be 
able  to  exploit  and  defend  against  vulnerabilities  resident  in  new  information  based 
systems.  A  possible  solution  is  to  establish  an  10  reserve  force  comprised  of  industry 
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experts.  During  crises  or  war,  these  “civilian  10  warriors”  can  protect  the  United  States 
national  infrastructures  while  probing  for  an  adversary’s  infrastructure  vulnerabilities. 

Summary 

The  USAF  must  be  prepared  to  defend  against  and  execute  IW.  This  chapter 
addressed  several  shortfalls  in  the  current  10  doctrine.  The  USAF  must  resolve  these 
shortfalls  in  order  to  execute  10  in  support  of  joint  operations.  This  chapter  also 
addressed  the  AIA’s  lOF  concept  and  provided  some  recommendations  for  10  modeling 
and  simulation  in  support  of  JFC’s  objectives.  The  next  chapter  will  summarize  the 
thrust  of  this  research  paper. 
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Chapter  6 


Conclusions 

There  will  continue  to  be  states  or  groups  that  oppose  or  threaten 
American  interests  and  values  or  those  of  our  friends  and  allies.  Our 
recognition  of  these  threats  and  challenges  will  continue  to  drive  our 
national  security  efforts. 

— Joint  Vision  2010 

Information  Operations  is  becoming  significant,  both  in  the  military  as  a  whole  and 
in  the  NIL  For  the  military,  “Information  Warfare  has  emerged  as  a  key  joint  war¬ 
fighting  mission  area.”^  In  order  to  fully  exploit  this  new  way  of  war,  both  the  Joint  Staff 
and  the  USAF  have  published  their  respective  doctrines  on  10.  The  doctrines  provide 
fundamental  concepts  and  ideas  on  each  entity’s  approach  to  10. 

Despite  these  recent  publications,  there  are  unresolved  issues  on  the  best  means  to 
organize,  train,  equip,  and  ultimately  employ  10  across  the  spectrum  of  conflict.  The 
USAF  especially  needs  to  resolve  terminology,  organization,  and  relationship  differences 
both  internally  and  with  the  Joint  community  on  10. 

But  it’s  not  all  bad  news.  The  USAF  has  taken  several  steps  in  the  right  direction. 
The  lOF  will  energize  and  synergize  10  planning  and  execution  at  the  operational  and 
tactical  level.  The  USAF  is  also  training  10  warriors  and  developing  10  modeling  and 
simulation  tools.  However,  there  is  yet  more  to  be  done.  First,  the  USAF  must  develop 
10  techniques,  tactics,  and  procedures  (TTP)  documents.  The  TTP  documents  will 
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provide  the  foundation  for  ROE  and  legal  eonsiderations  during  10  exereises.  Finally, 
the  USAF  must  partner  with  industry  to  aeeelerate  the  development  of  not  only  10 
modeling  and  simulation  tools  but  also  potential  lA/CNA  weapon  systems.  These  tools 
are  neeessary  to  eertify  10  warriors  and  to  provide  an  understanding  of  lA/CNA  effeets 
on  an  adversary’s  national  power.  These  same  tools  will  also  help  in  modeling  the  effeets 
of  a  potential  attack  on  our  Nil  and  DII.  The  understanding  of  the  effects  of  an  lA  or 
CNA  is  important  for  establishing  the  criteria  for  detection,  assessment,  and  response. 
An  lA  or  CNA  effects-based  criterion  for  the  Nil  and  DII  will  ensure  the  appropriate 
response  by  the  proper  United  States  agency. 

Notes 

*  Joint  Chiefs  of  Staff,  Information  Warfare:  A  Strategy  for  Peace...  The  Decisive 
Edge  in  War,  Preface. 


38 


Glossary 


Command  and  control  (C2),  The  exercise  of  authority  and  direction  by  a  properly 
designated  commander  over  assigned  and  attached  forces  in  the  accomplishment  of  the 
mission.  Command  and  control  functions  are  performed  through  an  arrangement  of 
personnel,  equipment,  communications,  facilities,  and  procedures  employed  by  a 
commander  in  planning,  directing,  coordinating,  and  controlling  forces  and  operations  in 
the  accomplishment  of  the  mission.  (Joint  Pub  3-13) 

Command  and  control  warfare  (C2W).  The  integrated  use  of  operations  security, 
military  deception,  psychological  operations,  electronic  warfare,  and  physical  destruction, 
mutually  supported  by  intelligence,  to  deny  information  to,  influence,  degrade,  or  destroy 
adversary  command  and  control  capabilities,  while  protecting  friendly  command  and 
control  capabilities  against  such  actions.  Command  and  control  warfare  is  an  application 
of  information  operations  in  military  operations.  (Joint  Pub  3-13) 

C2-Attack.  Prevent  effective  C2  of  adversary  forces  by  denying  information  to, 
influencing,  degrading,  or  destroying  the  adversary  C2  system.  (Joint  Pub  3-13) 

C2-Protect,  Maintain  effective  command  and  control  of  own  forces  by  turning  to 
friendly  advantage  or  negating  adversary  efforts  to  deny  information  to,  influence, 
degrade,  or  destroy  the  friendly  C2  system.  (Joint  Pub  3-13) 

Computer  network  attack  (CNA).  Operations  to  disrupt,  deny,  degrade,  or  destroy 
information  resident  in  computers  and  computer  networks,  or  the  computers  and 
networks  themselves.  (Joint  Pub  3-13) 

Counterdeception.  Efforts  to  negate,  neutralize,  diminish  the  effects  of,  or  gain 
advantage  from,  a  foreign  deception  operation.  Counterdeception  does  not  include  the 
intelligence  function  of  identifying  foreign  deception  operations.  (Joint  Pub  1-02) 

Counterinformation.  Counterinformation  seeks  to  establish  a  desired  degree  of  control 
in  information  functions  that  permits  friendly  forces  to  operate  at  a  given  time  or  place 
without  prohibitive  interference  by  the  opposing  force.  (AFDD  2-5) 

Counterintelligence.  Information  gathered  and  activities  conducted  to  protect  against 
espionage,  other  intelligence  activities,  sabotage,  or  assassinations  conducted  by  or  on 
behalf  of  foreign  governments  or  elements  thereof,  foreign  organizations,  or  foreign 
persons,  or  international  terrorist  activities.  (Joint  Pub  1-02) 
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Defense  Information  Infrastructure  (DII),  The  shared  or  interconneeted  system  of 
eomputers,  communications,  data  applications,  security,  people,  training,  and  other 
support  structures  serving  DOD  local,  national,  and  worldwide  information  needs.  The 
Defense  Information  Infrastructure  connects  DOD  mission  support,  command  and 
control,  and  intelligence  computers  through  voice,  telecommunications,  imagery,  video, 
and  multimedia  services.  It  provides  information  processing  and  services  to  subscribers 
over  the  Defense  Information  Systems  Network  and  includes  command  and  control, 
tactical,  intelligence,  and  commercial  communications  systems  used  to  transmit  DOD 
information.  (Joint  Pub  3-13) 

Defensive  counterinformation  (DCI).  Activities  which  are  conducted  to  protect  and 
defend  friendly  information  and  information  systems.  (AFDD  2-5) 

Defensive  information  operations  (DIO).  The  integration  and  coordination  of  policies 
and  procedures,  operations,  personnel,  and  technology  to  protect  and  defend  information 
and  information  systems.  Defensive  information  operations  are  conducted  through 
information  assurance,  physical  security,  operations  security,  counter-deception,  counter- 
psychological  operations,  counterintelligence,  electronic  warfare,  and  special  information 
operations.  Defensive  information  operations  ensure  timely,  accurate,  and  relevant 
information  access  while  denying  adversaries  the  opportunity  to  exploit  friendly 
information  and  information  systems  for  their  own  purposes.  (Joint  Pub  3-13) 

Electronic  warfare  (EW).  Any  military  action  involving  the  use  of  electromagnetic  and 
directed  energy  to  control  the  electromagnetic  spectrum  or  to  attack  the  enemy.  (Joint 
Pub  3-13) 

Global  information  infrastructure  (GII).  The  worldwide  interconnection  of 
communications  networks,  computers,  databases,  and  consumer  electronics  that  make 
vast  amounts  of  information  available  to  users.  The  global  information  infrastructure 
encompasses  a  wide  range  of  equipment,  including  cameras,  scanners,  keyboards, 
facsimile  machines,  computers,  switches,  compact  disks,  video  and  audio  tape,  cable, 
wire,  satellites,  fiber-optic  transmission  lines,  networks  of  all  types,  televisions,  monitors, 
printers,  and  much  more.  The  friendly  and  adversary  personnel  who  make  decisions  and 
handle  the  transmitted  information  constitute  a  critical  component  of  the  global 
information  infrastructure.  (Joint  Pub  3-13) 

Information.  1.  Unprocessed  data  of  every  description  which  may  be  used  in  the 
production  of  intelligence.  2.  The  meaning  that  a  human  as-signs  to  data  by  means  of  the 
known  conventions  used  in  their  representation.  3.  Facts,  data,  or  instructions  in  any 
medium  or  form.  (Joint  Pub  1-02) 

Information  assurance.  Information  operations  that  protect  and  defend  information  and 
information  systems  by  ensuring  their  availability,  integrity,  authentication, 
confidentiality,  and  non-repudiation.  This  includes  providing  for  restoration  of 
information  systems  by  incorporating  protection,  detection,  and  reaction  capabilities. 
(AFDD  2-5) 
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Information  attack.  An  activity  taken  to  manipulate  or  destroy  an  adversary's 
information  systems  without  visibly  ehanging  the  physieal  entity  within  whieh  it  resides. 
(AFDD  2-5) 

Information  environment.  The  aggregate  of  individuals,  organizations,  or  systems  that 
eollect,  proeess,  or  disseminate  information;  also  included  is  the  information  itself.  (Joint 
Pub  3-13) 

Information-in-warfare  (IIW).  Involves  the  Air  Foree's  extensive  eapabilities  to 
provide  global  awareness  throughout  the  range  of  military  operations  based  on  integrated 
intelligenee,  surveillance  and  reeonnaissanee  (ISR)  assets;  its  information 
oolleetion/dissemination  aetivities;  and  its  global  navigation  and  positioning,  weather, 
and  eommunications  capabilities.  (AFDD  2-5) 

Information  operations  (lO).  Aetions  taken  to  affeet  adversary  information  and 
information  systems  while  defending  one's  own  information  and  information  systems. 
The  Air  Foree  believes  that  in  praetiee  a  more  useful  working  definition  is:  [Those 
actions  taken  to  gain,  exploit,  defend  or  attack  information  and  information  systems  and 
include  both  information-in-warfare  and  information  warfare.]  {Italieized  definition  in 
braekets  applies  only  to  the  Air  Foree.  (AFDD  2-5,  Joint  Pub  3-13) 

Information  superiority  (IS).  The  eapability  to  colleet,  proeess,  and  disseminate  an 
uninterrupted  flow  of  information  while  exploiting  or  denying  an  adversary's  ability  to  do 
the  same.  The  Air  Foree  prefers  to  cast  "superiority"  as  a  state  of  relative  advantage,  not 
a  eapability,  and  views  IS  as:  [That  degree  of  dominance  in  the  information  domain 
which  allows  friendly  forces  the  ability  to  collect,  control,  exploit,  and  defend 
information  without  effective  opposition.]  {Italieized  definition  in  braekets  applies  only 
to  the  Air  Foree  and  is  offered  for  elarity.}  (Joint  Pub  3-13,  AFDD  2-5) 

Information  system.  The  entire  infrastrueture,  organization,  personnel,  and  eomponents 
that  eolleet,  proeess,  store,  transmit,  display,  disseminate,  and  aet  on  information.  (Joint 
Pub  3-13) 

Information  warfare  (IW).  Information  operations  eondueted  during  time  of  erises  or 
eonfiict  to  aehieve  or  promote  speeifie  objeetives  over  a  speeifie  adversary  or 
adversaries.  The  Air  Foree  believes  that,  beeause  the  defensive  eomponent  of  IW  is 
always  engaged,  a  better  definition  is:  [Information  operations  conducted  to  defend  one's 
own  information  and  information  systems,  or  to  attack  and  affect  an  adversary's 
information  and  information  systems.].  {Italieized  definition  in  braekets  applies  only  to 
the  Air  Foree  and  is  offered  for  elarity.}  (Joint  Pub  3-13,  AFDD  2-5) 

Military  deception.  Actions  executed  to  deliberately  mislead  adversary  military 
deeision-makers  as  to  friendly  military  eapabilities,  intentions,  and  operations,  thereby 
eausing  the  adversary  to  take  speeifie  aetions  (or  inaetions)  that  will  eontribute  to  the 
aeeomplishment  of  the  friendly  mission.  (Joint  Pub  1-02) 
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National  information  infrastructure  (Nil).  The  nation-wide  interconneetion  of 
oommunieations  networks,  computers,  databases,  and  consumer  electronics  that  make 
vast  amounts  of  information  available  to  users.  The  national  information  infrastructure 
encompasses  a  wide  range  of  equipment,  including  cameras,  scanners,  keyboards, 
facsimile  machines,  computers,  switches,  compact  disks,  video  and  audiotape,  cable, 
wire,  satellites,  fiber-optic  transmission  lines,  networks  of  all  types,  televisions,  monitors, 
printers,  and  much  more.  The  friendly  and  adversary  personnel  who  make  decisions  and 
handle  the  transmitted  information  constitute  a  critical  component  of  the  national 
information  infrastructure.  (Joint  Pub  3-13) 

Offensive  counterinformation  (OCI).  Offensive  IW  activities  which  are  con-ducted  to 
control  the  information  environment  by  denying,  degrading,  disrupting,  destroying,  and 
deceiving  the  adversary's  information  and  in-formation  systems.  (AFDD  2-5) 

Offensive  information  operations  (OIO).  The  integrated  use  of  assigned  and 
supporting  capabilities  and  activities,  mutually  supported  by  intelligence,  to  affect 
adversary  decision-makers  to  achieve  or  promote  specific  objectives.  These  capabilities 
and  activities  include,  but  are  not  limited  to,  operations  security,  military  deception, 
psychological  operations,  electronic  warfare,  physical  attack  and/or  destruction,  and 
special  information  operations,  and  could  include  computer  network  attack.  (Joint  Pub  3- 
13) 

Physical  attack.  The  means  to  disrupt,  damage,  or  destroy  information  systems  through 
the  conversion  of  stored  energy  into  destructive  power.  (AFDD  2-5) 

Probe.  In  information  operations,  any  attempt  to  gather  information  about  an  automated 
information  system  or  its  on-line  users.  (Joint  Pub  3-13) 

Psychological  operations  (PSYOP).  Planned  operations  to  convey  selected  in¬ 
formation  and  indicators  to  foreign  audiences  to  influence  their  emotions,  motives, 
objective  reasoning,  and  ultimately  the  behavior  of  foreign  governments,  organizations, 
groups,  and  individuals.  The  purpose  of  psychological  operations  is  to  induce  or  reinforce 
foreign  attitudes  and  behavior  favorable  to  the  originator's  objectives.  (Joint  Pub  1-02) 

Special  information  operations  (SIO).  Information  operations  that  by  their  sensitive 
nature,  due  to  their  potential  effect  or  impact,  security  requirements,  or  risk  to  the 
national  security  of  the  United  States,  require  a  special  review  and  approval  process. 
(Joint  Pub  3-13) 

Vulnerability.  1.  The  susceptibility  of  a  nation  or  military  force  to  any  action  by  any 
means  through  which  its  war  potential  or  combat  effectiveness  may  be  reduced  or  its  will 
to  fight  diminished.  2.  In  information  operations,  a  weakness  in  information  system 
security  design,  procedures,  implementation,  or  internal  controls  that  could  be  exploited 
to  gain  unauthorized  access  to  information  or  an  information  system.  (Joint  Pub  3-13) 
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